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The invention relates to the access to resources Internet. Since the generalization of Internet 
network, it often appeared desirable to condition or control the accesses to such or such site, 
in particular to hold the access to authorized people of them, to limit the access according to 
certain conditions, to condition of them the access to the preliminary payment of a sum, etc. 
One of the goals of the invention is to propose a process of access which can meet these aims, 
by allowing an adaptation to very varied cases of figures, as it thereafter will be explained, 
but while preserving an excellent security and an excellent control of the access to resource 
Internet. The invention is based mainly on the use of a card with microcircuit, handing-over 
with a user (in a way anonymous or personal) and that this one inserts in a card reader with 
which its terminal Internet is provided. Terminal Internet can be a microcomputer equipped 
with a software of navigation appropriate on Internet network as well as card reader to 
microcircuit, or, advantageously, a dedicated terminal, in the form of a case connected on the 
one hand to ajelevision receiver and on the other hand to a telephone line, equipped with 
means to enter of the commands, for example by the intermediary of an infra-red remote 
control, and comprising a card reader to microcircuit. Such a configuration is however not 
restrictive, and various alternatives can be considered, such as: terminal equipped with its 
own display (instead of television set), transmission by a way other than a telephone line, 
.such as network cabled, cellular radiotelefony (GSM), radiotelefony on local loop, reception 
of data per satellite, etc. More precisely, the process of the invention includes/understands the 
stages consisting with: to insert a card of validation in the terminal, this card 
including/understanding at least an identifier of card; to establish a connection of the terminal 
to a server of validation; to transmit terminal to the server of validation the identifier of the 
card; to seek, in a file of the server of validation, a whole of data relating to the card; to 
check, on the level of the server of validation, the conformity of this whole of data with a 
series of predetermined criteria, function of the identifier of the card; in the event of 
conformity, to update the data relating to the card and to turn over to the terminal of the 
parameters of connection to a resource Intern T, these parameters being a function of the 
identifier of the card; to establish a connection of the terminal to resource Internet according 
to the parameters of connection thus transmitted to the terminal. According to advantageous 
characteristics* - the whole of data relating to the card includes/understands the number of 
connections to resource Internet already carried out, and one of predetermined crite LMBO is 
the not exceeding of a maximum number of connections - the whole of data relating to the 
card includes/understands the date of pre mi ere connection to resource Internet, and one of 
the finished criteria prede is not exceeding the one duration maximum of pe remption 
compared to this date; - the parameters of connection to resource Internet turned over to the 
terminal are related also to at least some of the data of the aforesaid unit of data relating to the 
card and preserved in the aforementioned file of the server of validation; - resource Internet 
comprises moreover an electronic mail, and the idiot nexion with this resource Internet 
authorizes the access to a mailbox, the card of validation including/understanding at least an 
address of mailbox of this electronic mail. 0 

Other characteristics and advantages of the invention will appear with the reading of the 
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detailed description of a mode of imp^ment^ton of the process of the inventiqDv-^joR » 
reference to the annexed single figure, which illustrates the various means and resources 
indicated in the implementation of the process. 0 

In the example below, one will consider a terminal Internet in the form of a case 10 connected 
to a television set 1 2 for the display of the various data turned over by Internet network, this 
composing case, for the introduction of commands of navigation, a receiver 14 such as an 
infra-red receiver controlled by a remote control 16 at the disposal of the user. These cases in 
themselves are known and will not be described more in detail; their own operation is simply 
modified by addition of a specific software layer for the implementation of the process of the 
invention. The application to a dedicated case is however not restrictive, and one could as 
well consider, as indicated higher, to use a microcomputer equipped with a software of 
navigation adapted, with which the data would be displayed on the screen of visualization and 
the commands would be introduced by a keyboard. Terminal Internet 10 is equipped with a 
reader 18 of card for microcircuit, as that is known in oneself, for example to read a card 20 
whose microcircuit includes/understands the data of connection to the provider of access 
Internet or ISP (Internet Provider Service) 22 via the telephone network commutated 24. 

These data of connection are memorized in the card, which for example is addressed to the 
user after subscription of the subscription for provider ISP, with the telephone number of 
access to the ISP and various parameters TCP/IP (protocol Internet) to establish the 
communication with this last. These various parameters memorized in the card are charged in 
a temporary memory with case 10 with the first introduction of card 20, so as to make this 
case autonomous, so that it can be connected to provider ISP after withdrawal of the card (it 
will be seen thereafter that it is necessary to introduce another card and thus to release the 
reader for this purpose). The process of the invention rests on the use of a card with 
. microcircuit 26 (which one will call thereafter "card of validation"), distinct from card 20 of 
subscription to the provider ISP, and who is given to a user, or is bought by this one. 
Although one can consider a card 26 personal, the process of the invention is primarily 
conceived for an anonymous card, it is with- statement nonrelated to a particular user, and 
who can thus be freely distributed or resold without the user having to justify of his identity. 
This card is for example a card with microcircuit with synchronous logic cabled of the type 
Schlumberger "Eurochip". This type of card is particularly advantageous because of its weak 
price (because of cabled logic) and of the possibility that it offers encoding of information 
during the data exchange with outside, thanks to an algorithm of encoding incorporated in the 
card and activable selectively. The information contained in this card can be as follows: fixed 
masked zone, containing information specific to F bricant as well as an identifier of the 
application according to the invention (which makes it possible to recognize that it is indeed a 
"card of validation" such as here definite and not of a card having another function) - 
identifier of card or "number of sequence", typically on 48 bits, which is a number specific to 
the card, different from one card to the following one; - zone reserved for the implementation 
of the process of encoding of the data, with a secret code and a secret algorithm, nonreadable 
of the outside and implemented inside the microcircuit of the card - a bit being used to 
indicate if one or not wishes to implement the protected exchange of the data by encoding of 
information, or if, on the contrary, one can be satisfied to transmit informed them tions in 
light. The whole of the cards of validation which were marketing is indexed in a data base 28 
of a server 30 (which one will call thereafter "server of validation") which can for example 
include/understand, for each emitted card of validation, following headings - identifier of the 
card (which will be the principal key of access of the file) - addresses Internet (addresses 
URL) of an Internet site corresponding to the card in question (with each card an Internet site 
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sociated); - password and account nui^r # (^l^gih M ) for the access to this Internetrfi^^ 
"cookie", i.e. nonsecret password, per manent, authorizing the access to this site; - 
information of use such as dates from the first connection requested from Internet site; a 
number of connections carried out to this site by the user; numbers maximum connections 
authorized to this site period of validity of the card after the first connection; - addresses of an 
Internet site by defect (i.e. of a site where the user will be sent if for example its rights are 
expired) - etc. The course of the process is as follows. First of all, case 10 establishes a 
connection with provider ISP 22, in a way in itself known starting from the call number of 
this provider and parameters TCP/IP necessary to the establishment of connection. One 
connects then, via the provider ISP, case 10 with the terminal of validation 30, to which one 
transmits the identifier of card 26 introduced into case 10. This exchange can be carried out 
either in a way cryptee or in light, as one indicated higher. The server of validation 30 
explores then its data base 28 to seek the data relating to the number of card which was 
transmitted to him and, if the criteria of conformity are filled (purge date not yet reached, a 
maximum number of connections not exceeded, etc), it returns to case 10, always via 
provider ISP the 22 address of a resource Internet with the various parameters of connection 
necessary. These data are received and memorized by the case 10, which establishes then, 
always via provider ISP 22, a connection with the Internet site 32 of which it thus received 
the address, and can then continue the dialogue directly with this last to allow navigation in 
the corresponding data base 34, from which various information will be turned over to case 
10 and will be displayed on television set 12. As one can note it, the server of validation 
intervenes only in the preliminary phase of the process, when the case requires that the 
address of required Internet site be turned over to him. Once connection to this last 
established, the server of validation does not intervene any more, until the attempt at 
following connection with this same card or another of comparable nature. Very many 
, alternatives are possible. 

For example, it is possible to envisage a dynamic allocation of Internet site, while making 
depend the address on the site, and thus the choice of the site, a certain number of data 
relating to the card preserved in the data base 28. For example, to the first connection one will 
be able to connect the case to a first site, and to connect- it to another site the following times. 
In the same way, in case for example of expiry of the rights attached to the card, one will be 
able to envisage nevertheless to connect the user on an Internet site, but a site "by defect" 
which will indicate to him that its rights are exhausted and that it is necessary for him to get a 
new card. 

One will note in addition that provider ISP 22 can, in addition to the number of card, to also 
transmit to the server validation 30 information of identity of appealing, for example the 
account number of this one near provider ISP. This information could be memorized in the 
data base 28, for example to operate regroupings later on, while seeking for example, for the 
same account number, all the servers of which the same case required an access, so as to 
define a typical "profile" of the corresponding user. One will note in this respect the server of 
validation 30 and provider ISP 22 can either be physically and logically distinct, or to be 
gathered in a single site, provider ISP then ensuring the management of the validation of the 
cards. Another possible use of the invention is the management of an electronic mail, for 
example an electronic mail of company, the card of validation 26 being programmed' so as to 
store one or more addresses of electronic mailbox preserved in file 34 of server 32. It will 
thus be enough for the user to insert the card in the reader to reach the electronic mail and for 
example to read the messages which are intended to him. It is noted that the invention makes 
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x>sible to manage in manner nelle coniSif^n th^ecess to a resource Internet startiagE&esrjN people 
a card without this card not containing the parameters of access to the resource, therefore 
without risk of dissemination or uncontrolled use of this address. In the same way, this 
process makes it possible to hold the use of a case to only one and single Internet site, which 
is particularly advantageous within the framework of the protection of the minors, when one 
wishes to allow children to reach one or more sites predetermined other than very other. To 
this end, case 10. can be programmed, at the moment of the insertion of the card of subscriber 
20, to be able to function only if one card of validation 26 is inserted in the card reader, and 
for only resource Internet corresponding to this card. 



CLAIMS 

1. A process of conditional access to a resource Internet (32) since a terminal Internet (10) 
equipped with a reader (18) of card for microcircuit, process including/understanding the 
stages consisting with - to insert a card of validation (26) in the terminal, this card 
including/understanding at least an identifier of card, - establishing a connection of the 
terminal to a server of validation (30), - to transmit terminal to the server of validation the 
identifier of the card, - to seek, in a file (28) of the server of validation, one seems data 
relating to the card about it, - to check, on the level of the server of validation, the conformity 
of this whole of data series of predetermined criteria, function of the identifier of the card, - in 
the event of conformity, to update the data relating to the card and to turn over to the terminal 
of the parameters of connection to a LMBO source Internet, these parameters being a function 
of the identifier of the card, - to establish a connection of the terminal to resource Internet in 
fonc tion of the parameters of connection thus transmitted to the terminal. 2. The process of 
the claim 1, in which the whole of data relating to the card includes/understands the number 
of connections to resource Internet already carried out, and one of the predetermined criteria 
is the not exceeding of a maximum number of connections. 3. The process of the claim 1, in 
which the whole of data relating to the card includes/understands the date of the first 
connection to resource Internet, and one of the predetermined criteria is not exceeding the one 
duration maximum of time limitation compared to this date. 4. The process of the claim. 1, in 
which the parameters of connection to resource Internet turned over to the terminal are related 
also to at least some of the data of the aforesaid whole of gift born relating to the card and 
preserved in the aforementioned file of the server of validation. 5. The process of claim 1, in 
which the resource Inter Net comprises moreover an electronic mail, and connection to this 
resource Internet authorize the access to a mailbox, the card of validation 
including/understanding at least an address of mailbox of this messa gery. 
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